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<57) [Sfi] 




coifed ^ Y ^ X h f^#®:«£ J: D 3 tlfcSI^ 

it^^fif s?*x h ii^isHi«*^:i>Ti^S!iEijf!t*-??i> 



^2 001-142 3 98 
2 

10] ;l,»«f^^#^ h NfSMS 

y a: X >*^it^i'^>f s?* X K^f-m-rsfii^^'f s^ot 

XFf^»S-f^®i, 

^mm^iiAV' * X > fpg|#|?K: J: 0 fT«3 tiicm^'^ 
-Y * X h *#^/^:I^S!Sa^ES**^SSt'X ^ A© 



12] ^^-JZ3>j^fcit^'j h'-J - ^±<0^t> 
h^WL 20 

^)\/^^tf>h. ^L<D-f'l^^)\^^^^WLK.i:r>XWi~-'^ 



#Pa 2001 142398 
4 

i t. ^ Jl'»«^CD««[*J^tR»»I^Sffll8 

(b) i'^'fT>h»««:*Jt»T. X/^i-y (a) 
i. 

<c) 5'-7'rr>hiiafcD4il,>r. x-f-y::^<b) (cj: 
<d) (c) icJ:t)i'ms*ifcm^irAV>:ii:!f. 

<e) -9— /<sij»cfci>r. m^mm.^x:>x.im 

^ }VScM ^ , -7 T t ?c{3: 7 * ^l- ^*&-Cjg3ef ^ 



C4) 

( f ) rSC:f^-^fc^Sg^^E^#Cc^^4i^^MEP# 
( d ) &cfe&1^^^SrjSl»^C>^#fl^^<t . 10 

L ^ X V ^'^w^m^ a c ^ ^is 
2 0 t^m^nmumhm. 

(e l) ^-^"^^sD^tmnmu^-wo^nmrn 

fSCDM^^®^ leasee, 
(e3) 1f->'^'^SOCn61t^CD^^^®^C^lSL'T 

*«%<¥^*rax7^ 

(e 5) Xf^^y (e 4) ^cj: 5:}f1?^S3nfc^^>?^ 
MfS^a^^m^-r ^ X ;^ i . 

& '10 

Jcfct ^T^iSKiElf-- ex S-A'S^ 

(a) ««<D7"t?^;^X»tC^*rS«»©y-/i;^* 

^fflST^XT":?:^'^, 

(b) X'f'-^rf (a) vCj:»^m;5§4ifcSl^a>^-f 50 



^200 1- 1 42 39 8 

6 ■ . - ■ 

Xh^M'^^SXf^^y^P^^^^^^ 

(c) X^^j^-T* (b) ^cfcDM^atl^a^O^^^S^at 
X hs^^e^-^t^^i^^X h^f^^^axf 

(d) x^-^:/ (c) K:<l:0f^fiE3nfcS!i^5^-<^;^*x 
F 4r^/v^c^»MS«%lt^JffiSVXf^ACr)1f 

s^3^*'r^xT->:.'y<^. 

fly ^ }vxwHcnm'<mM t tcmmm&mmis^'^^ ti 

m^T-5i9^2 9i£«o^WHt^-ex^«i•t^:^^ 
l£« 

^^i^^xX Ff^.«^J^Jg^tr> X7^^>:7* (a) 

X h*5e«§«ccf^'rs<fc5^TiX7^«^:P^=feMtc:W^ 
5C£^#m^TSif^2 8iai8<D»IPiBiEt^--fcrx 

[fA:^ 3 2 ] il»ir|H!iEfi^«^$. ^JlfiiES^^jEE; 

:S2 8iell®!3#i!SBfE1?--ex*»:f-5:&fife, 

<fcot:7n§nSB#». :Ky--^-J (d) ^cfe^:ts^ifM 
i£?§#cDSl[NFMoff s c ^ ^Mffi't^ ^ X 



■ 7 ■ 

(b) if-^^*«^<Dcne>^<D^Mmf#^®^mu 
<d) mmo^^^^)hm^^mfiC^->x^^frifmm 

(e) (d) ^cJ:?3f^^§tifc«^f'^^;'US 

"57 ^ T > h ^: U T § ^ /cdf) CD a > ^. ^ M 

F^M^T ^®r:<D>^P^^ An— F<^. 
C cD^no ::^n A :3 - F J: lifc^^O ^ 

^ at; X F ^^6^ ^ ^ X X F ^f^^-r S»H<D::/a 40 

A :a Fee J; S3 nfcM^^ 
X F *^^fc^MI»^#^^MSiE$>XT" A<D1^ 

b" ^ - ^K;5^S? 0 »r^f^:?^n ^'^■^ A r3 F *«3ft^ L//c ^ 50 



^2 00 1 142 39 8 

• ■ S . 

nm\m * ^ «f sis s 

fc^O0.r,<Z):7'U A - F ^ . 

t. 

[0 00 1 ] 

stifcm.^Mmcm^x&msnxtj:<. ^'^-MMcm 

Xl,^fcCt%:M.W$^^Ct^vi!^t^r^y :i^)l'¥m^M 
Mi^X ^ Afe J: ?/^tfeB#Sfi^lE^'X A $cBgT S « 
[0 00 2] 

^mut L rsc^ ^ c t 'i)mmx^ o . § 6 s 

[0 0 0 3 ] b:^ib&36S6. C(DJ:^35:/%*yr3>..htf<D 

^ctib^x^^ct'f)>h. nmmwtbx(om^m^>x 



C6) 

9 

[0 004] Cii'^cMVm^. y't>^)V:^(cCmMm^ 

ff-ri;f-' b'X<5: t r. #PI^7 " 2548 9 7W^^ 

h<D^^^. l^fc. nm^B - 1 8 5 5 5 1 ^^♦g^ta 

[0005] * fc#g§^6 - 1 4 0 I 8*^&»C|gaO 
RC (Cyclic Redindarcy Cheek i j^PTL^^^S)^;^^^ 

m (m^^tuD 5^3 HA - 1 fxti ^m^^xmtr^ 

t tiM hxm - JEMS:**: i>-^y't^^J\^:Zm 
[000 6] § e>R:?#«¥6 - 5 0 1 5 7 1 #^ir*S^ia 

r ^ >f a x > y'^mt^fri^i 
[0007] CiO^KM^m^fc^'^. ^l^WL-yfd^m 30 

n^i'^m^^yf&i^MMstixi.^^^ c<Dyjmt. mm 

^^tP>^^:^^^^Mf%CtltX^rj:\,>, 
[0008] Sfc. ^^®iEiE^«3Cy5KiEr&a C <!: ^ 

^s«i^iE^#*»#"r 6 s^w^^^g ^? 6 n 

[0009] IETF (Internet Enqineerinq T 

ask Force ) ^C:ldl,>X^'^vl^^mWL^Cj:^EMSilfc'f 



#^2 0 0 1 -1 4 2 3 9 8 
10 

mmit:^m^htixi>^. ccxwmiti!)mm^tixi.^ 
m^}mmmm^mnt^cti}m^tixi>rj:i.^mM(D 

So 

[ 0 0 i 0 ] . 

5 7 6 1 '^^rJEmo ri^MKiE^^.! Tit. ^gtffiiEli 

m^mmr ^ ^ ^> r > h mx. s«of^ a 

[00 i i ] ^fc. "^-^mxit. ^»8E%tf5^gB 

tiys3&5- — o<ow^M%Mit>x^t^ ^ ^ is^oc 

^tKOy'i^^ji^m^^mfs^mi u r ^ ^ ^i^w^t 
ffT -CCD W3&5^f£- L /i-: c >i» ^ mMw%mmr ^ 

mLx-xm^aE^^mmMt^ctij^'^mx$>?>. 
[0012] v^hrj:^^. ^mofcmM^&mmMm 
mmm^m^^xm—o:>'ri> ^ )]^:^^cmmm^ ^jsae 

[0013] ±iEmM'^^cm^xrj:i§tifci><D 

aia®b^:u. Up&^fe*a:«Mf^flEia»*»H«^iEi!«f 



too 14] tfc. -^'^a. mL^mmm^^^^b 

[0015] 

mm^^\ifm^^m^mt%mu. -^-^^mmt. mm 

[0 0 17]^:^. Sii^<D^S3BSW^ST. 

t^mi^umi^. mM<o-^<Dm^mx^M.htifcm 
)\^m^mmt,im<o^v^ ^)\^m^^mic^^ x^s so 



#|g2 0 0 1-1 42 39 8 

[0 0 18] tfc. -^^Mmit. ^y4T>hmmt''r- 

7.T-jV'L^ (c) i^'^'-fT^ h^^(D*5lvC, ;5^f':5^ 

h^f^^-r^Xf^-^:?'^. (d) Xr- ji^:/ 

(c) ^j:Df^^§nfcM^^-/s;^^x ^%^^/c^s^J 

7.T:fV*t, (e) -9^— /^*^a^fel^'C. ^gSMM^* 

Mmm^i'^mt^^^^ yyt. (f) p'^4r>hmm 

1 0 0 i 9 ] «fc; ^^Us m^1StU:::^^/^C0^3 

&->x. (a) m^(o'riy^)\^xm(^n^^mm<D^4 

SyxXF^f^^-rSXT^^jir:^*^, (b) Xf^v^ (a) 
(c) XT^'^-y (b) ^cJ:«3»^ati/'cM^<D^ 

H^t^^X h^i6^^^'/S^:s::X h ^Srf^^T ^ X T* .1? :7* 

(d) x^^^-?* (c) 5Cj:«pf^i^§nfciK^ir^s;^ 
jr. X h ^^^^I^S^^iES3c^^l?MM>'X 7* ACDI^— 
^^'^^ic^ttr'SX'r -y^b. ( e ) 

[0 02 0] ^fc. :^WM\t.. ^M^ffii^Xr'ACDl;^- 

nM\^.^m^xmn'^ ^ x ^ . ( b > - 



13 

^Xy-y/t. (e) y.'Tv-/ (d) ^J:DfP^3tifc 
[0 02 1] ^fc. n>e:^^-^^^»ffi 

Stifc«0^>r^;^x;^ FsO^^tt^^-f v^^ X F%f^^ 
S WH<D :/n y A :3 — F . C A 

[0 02 2] ^fc. d>*<<bfe — ::>a>:3>fcf 

L fc :3 > e - ^ *im"^Jfi|f^iB«l»»^* ^ T . 



#^2 0 0 1-1 42 39 8 
14 

msL(of't;>^}m^^m^j^-:»xm--mm(Dm 

mmm y'v>^Ji:tmffCMvx^M^tifcmmo:>y'i> ^ 

[002 3] 

(omm^-oi^xmrn^^. 

[0 024]^! ifC-^^m<OW~-'(DMM^^^%^y :t 

[ 0 0 2 5 ] ill &c*5c^r . y 4')i^mmmmmt^:^r^ 

A 1 It. Fit Hfittfg, W^lf ^^O^aS. ^ 

i . c ^ ^ .X .7. F f'^iii^^a 1 1 -em^ ^ n^m»(D 

€f^^^^^i^>f s^x;^ Ff^^S¥® 1 5 C(D^^ 
m.1 7^iffVxmMm^^4ty:€.::^ Ff^^^-'Ml 5^^^ 

m»^^m^B2 5 ^^^^t"r§p#M®sT"®2 1 c 

O^M^iE^®2 1 ^ci:^figt^^fc#<?>ife-?fcl^,sScD^ 

[0 02 6 ] CCX. ^-{lys,X Ffm^Sl 1 ^ 

15^. ^«^S1 It. :S^f^S2 53&^^^^r>F 
85 1 0 0 7=^-^*il.»«f¥«*S 1 8:cb!^a! 

[002 7] iUT> Si 1 «r#MU^. ^-©UMiJgJBK: 



• ■ IS . 

^c. S^t>:^;S/:S:S»^c^^ t^^^Bi^ (Pi^^i S HA - 
[0 02 9 ] ^^S^j^^'^. V iy^mm^ h . Mftf^i^ 

i^^x hh (gi ) . h ) . h 

) ^f¥^^ti^« 
[0 03 0} y^^C. it^^j^x.P^Ym-^^Ml 

) ' h ) — h ) C(Dte 

[0 03 1 ] ccT^-^a^^^v^xx srffl 

l^S-^'^*:? i S<b. i (h (g*! } - h 
) — h ( ) ) 3^-^-^>r>^xX Vtfjih. 
m^'^^V:^^ h i (h (ee ) ' h (gs ) 

[0032] f"i^^iU^:Sfm*® 1 9 \{X. m^^^ 
.xXbi{h(sa ) * h isz ) h (b^ ) ) t 

[0033] m^T. i t?^;!:. CCD^S^^ 

^il'M^s ^^^^^X b i (h (^j ) ' h 
) - h ) ) ^J:l^mM i ^^is^^MM 

[0034] m -'(o'mmM(icj:nu. ^^vz3>.t(Dr' 
mi^<Dfc^^mMmE^m^mnbx hh'^ct 

[0 035] gfc. ^SSPl^^ff 'i>/c^<D»&^?g<D 



(9) #eS 2 0 0 1 1 4 2 3 9 8 

[0 03 6] c ti^c J: «9 . mn(Dy'%>^)h:^i^mmw 
^n^nfc^Mi^m^^^>xmM§tixrj:< . i)^-::fm^^ 

mm vc#fiE iyx^^ftct^mmt?>ct m-^m trj:^^ 
x—-o<DmMmwmm9^MU^f^ti^t^<fj:?>tc^. m 

10 S« 

[0 0 3 7 ] mc. m 2 ^c~$:wm:>m~-:,oyMmBm^m 

[0 03 8] !a2^c:^t>r. :7:t;l'^M^S§^as^Xf* 

X h?rf«f ^a^:^ Yt^xX ffmT'SB 5 CCD 
il'S^f^^^S 3 9 fC jllftr 3 7 <!!: . SISI^ 

'^^s®f^f^m4 3 8.i!p^mwLfcmm%m^mm'm 

3 7^/M/T^^:^-^ >^xX hf^^~¥-M3 5^6SCtm 

Mmm^^m^mA 5 ccj^f>rr'^B#sfjMiE--^®4 1 

mi^mMimmt Lxmrn^^mmmm^m 3 a 
f§SB«FMeiE^®4 1 tfthm^*immmmMmm%^ 

mt^m3 7 . ^s(^®4 5:^j:mcmb^M.^m4 1 
^mn^m4 3 at mmim^m4 3 b 53:. 

[0 03 9] CCr. ^4t>^::^hi'^^^m3 i ¥ 
>fS^*XFte^#®3 3<b. ltt^5r^S^:f.Xhf^^^© 

3 5 miliums 7 ^m^BA 5 1 . ^^®4 
50 mim§^m43ht^^^^T>hmioo%mm 



my 



17 



[ 0 0 4 0] l^AT. S2^#MUr. ®r.<D^^M^ 
[0 04 1 ] /•<y:::^>..l^>6r^=^'feJ^Wffi3^J:/^'V:=3>p^ 

[0 042 ] ^^/>^;^x Ff^^^®3 ifmrnmufm, 

[0 04 3] ^^vly^mWL^^. M^y'%^^}h:kM^u 

R . ^-r^<h. ar^fiPx;:^ bfi^^wa 

3 UCiO ^-f i^xX Fh (ei ) . h ( g2 ) , 

h (Ea >^^ff^3ti^« 20 
[0 0 4 4] h^-gr^Ms 3^cj:0. m 

:^-^i>xX hh ) , h (g2 ) , h 

^« , 

[0045] X fflS^^SS 5 -efflC^a^v 

5^^j3Lf^^^ i ^T^<^. i (h {g'i ) - h (g' 

^^t>xX f i (h (Ri ) -11(^8 ) 30 

[0046] y'v^jm^f^m.^ms 9 m^^A 

xX F i (h (gi ) o h (g^ii ) • - h (g":c ) ) <h 
8#Mmf##lg4 3 a R: J: ^) IK^ L/c5^S« t ^^t^=ft> ^ 

[0047] nwmw^m.^ i ^-^^^-y 7. \ \ 
(h (gr, ) » h ) --h (g« ) ) , nnx 

m^M4 5^C^ffit' 
[0048] ^iE#IS4 7 ^^^^4 5 X^^^M-> 

[0 04 9] §6^. i^JffiEiES^SR:#&.f 

[00 5 0 ] Ij&OftJ:'^ mrKDHSfejgSlRicfcn so 



«Sg2 00 i - 1 42 39 8 

[0 0"6 1 ] fcC^. l:mbfcC(Oj:^)tj:y ^jl^mmi 
[ 0 0 5 2 ] m 3 

t , i *aKfS*-B^9^a!m»^ I 1 3 a, 1 

13b . ' * ' . 1 1 3 s i; cti^nmrnM^^mi 1 

3a; 113b, • • 1 1 3 sft&Cl-QToS^t^ 

|^CDS^#® ilia. 111b, -—.Ills 
Ctlhm^^m^l 1 1 a. 111b, • • • . 11 

1 s »^ i -^^-^m^htl. n^mL^crt>^^)i^m^% 
i^mT^WM<Dri;>^)i^m^^m 1 1 5 a . 1 1 5 b , 
— ' . 1 1 5 s mmLor%>^)m^^mi 1 5 

a. 1 i 5 b. — ^ , 115 sTl*u:R:f^^§tif^:S 
a, 115b, , 115 sft^ 1^3lS?L. ^tl 

[0054] ^3*#ML'r^H.<D||JS^«^:fe 

^mi 1 1 SL(Dm^^i,C^iiCWmiMit>i>f>K i&(D^^:i$ 

[0 05 5] «f^$ci:f5fpJS3ti/cf^^l^Xh:S*, S 

f-Ai 0 iF^oM'&^Mi 1 1 a^cfei^^r. mMimM^ 
S 11 3 a tCcfc QKf#Sn/c^^Ji!S^SnB|^jEPff * 



cm 

19- 

^Jm^^m 115a. 115b. — 115sl? 

s nit 'f'y jvm^^t. m^^^j^ ^^^s^f^^^ig 
[ 0 0 5 6 ] s p:,Km^^^^^i\^m^{'m^m 1 1 ? 

^ ^ J^i^^:g#® 1 1 5 mc "--oMJRf ^ C i # ^ ^ 

f^-rSo ^i^r. ^»SE?9»fl^ig5^S 1 1 9^^. 

[0 05 7] felT. f'^^il'^^f^^^-otiT. 

[0 05 8] ST. P ^ q I/, 
n == p Q 20 

^*?<« ^or. 

* (n) - (p~i) (a- 1 ) 

gcd <e, (p-1) (q-i) ) =1 

e d ~ l mod 4^ ( n ) 

[0059] ^m<rmn^W':>n%\tm%fV'^}yxm 

[0 08 0] 

c mod n 

<bfe<o C(Di:#. c%^^f=^^:i^JS/»:gflH^M^®l 1 

d-"d, -i-dz -F-'d. 

[OOSUc ^m!^ ^ mod n. 
c» m"* ' mod n 40 

115a, 115b. 115s T^f^^S tiSf^ 

[006 3] ig4«c*5iir . %w^mmx^y^^h. 1 0 

3 fly ^ yvsMM^mm^ X '0 ^^fm?>^m^f-m 1 

3 0 -mmm^^^^x/J>r4: < t h 1 n 



#^2001-1 42398 

3 3 b. • ' • . 1 3 3 s 1*:. cn6^»M#^lgi 3 
3a, 133b, • • • , I 3 3 sft^C 1 "oTofg^t^ 

ti. ^m^si sor^&^f^^fcT^^s^^^^i-srSM^cNF^ 
:s»Mt , . ^imir^mm<Dm^^mi 3 i a, 13 

lb. • • - . 13 1 si. e:tl6«-&#Sl 3 1 a, 

13 lb. — 1 3 1 s»R:iot^-o^l:r6>ti. 

Si 3 5 a. 13 5 b. • • - , 1 3 5 s Ctl^m 

B.<0 ^ 13 5a. 135b, — - , 1 

1 3 5 a, 135 b, — 1 

^ii/S^fm^^i 3 7 crihmmw<'ity't>^)v 
[0 084] nsfej^o'Meri:. m^Mxi^mBomm 

fi^i^L/Tl^So K5*?j:t^6^C:^l^r. ^ , t 

f^s^50 1 mmmwiWM^^\i; ^ /c ^ # (Dwmm%\ 

[ 0 0 6 5 ] ia5t?S^. 3"0(Z)^^|^»^®ife l!lg 
^c!^C^M1«^^W#l/, 2rpJBfe|^D^SiJft«*m» 

[0 0 6 6 ] ^7^^. ^6 t)kMijXm^%^^^mch 

<im%^^^. Ii7 0c*iur. R , I2 R , I3 i 
t, 2 , 12 2 , Is a ^3:. 3o<z>^IK 



. . ... xm 

21 

, . ta 3 , is sit. 3-:^<DmMimM^m^3m 

[0089] ^mMimm^mmn^^mm<D-^<Dm 
[ 0 0 7 0 ] fib. #»^^M§cf'^:^^;i^S:SM^i3j* 

(2) "-*<D«-^#Ssc7^i^^ib:»*^®fe3l<S?J 



00 i --- i 42 38 8 

22 

M^^&^<DmM^m^^^WM Qtd amxs> 0 . 

„ ^9<D ( 1 ) . (2). (3) 

BCD ( 1 ) . (2) . (3) ecfflsra^-x^mir^ 

[0 07 3] c rx\ &m^^muM&Mm&. 
hx. ^mm.^Mdmmmmxnhn^mmmmDm 

0^i^^)m^^mcMvxi,^m^i>mm<DmMmi^ 

[0076] H9(D (i) <DiS^. <C"b) /u*M 

i^t. m^^uext>^\ n = ix$>^<Dx. m&m^ 

f@^^^ { d - a ) /uK±C«/jNCD»|^Mm^ i 
X-^>^n^mi^^tcfcWitt'^Ct t(^~^mx * ^ . C <D:^ 

[0 07 7] C<Dmm. t . ^Bi^S!jffffi<*:^S^^jEp«f^ 

^^u. mm^iA . !*> te. t?. ta 



.. ^ ...C13) 

23 

10 07 BIMBCO (2) om^. ^MIb t t ^ (DM 

[ 0 0 7 9 ] 1190) < 3 ) (Dm^. mmt s ^ t ft CD® 
0 . fBSiiiil;!: < d - a ) /u fe( J:CD^/^CD^^|im^C 

[0080] ^mst^iEs^x-^A&c^o 20 

[008 1 ] cn^ML. ^Eaa^JSJ^^-rj*. 

"Sc. 

[0 082] CCD J: ^ i&:^tfe^S5®ffi:?'a Al^iS^ 
[0 083] Ji^b/cBH. ^H<D^li^3lST 40 

DSA (Diqital Signature Algorithm ) ^CD® 

[0084] ^ fc. f's;^ ^ il-SKM t <x>f-^fc> 



#ig2 00 i - 1 42 39 8 
24 

^& § i!- ^ or * r . 1 ^<JMM^i^ ^ r= >' '^>l'-SC 

[ 0 0 8 5 ] g| i 0 ^^^WOmSiDXSiJ^JM^C 

[0 08 61 ^10 $C*$lf>T. V 

oo^6^c*« ^^-rT> hS^i 0 ojiji^MPSM^-e 
^ * (D s;^ ^ G ^> 6 ^sisas* R ^ 

^r-^m2 0 0 ^cs^r. 1/'"-/^^ig2 o o ^vm 

[ 0 0 8 7 ] n i uc. HI 0 cD:;^ ^ )v^m^m^mm 
iEs^xf*A3 0 o^c^i^f^^'>4r> hmi OOCD— « 

[ 0 0 8 8 ] *T. f^yd?iK^Jg5e*S5 UC J: D . 

[0 08 9 ] ai^. Bt»jfg^^S4 9 m^m,^^^m 

[0 09 0];X&c, a^-Y^^xX h^^^-^aa 3^CJ:0. 

[0 09 i];X^C. ^^a^-^^t^xX hf^a^Sa 6$C<i: 
[0 09 2] ^bX. m!^^^iy^:Xh^-^tsm^Mm 

^R=&mn^m3 7 ^i^tf-^tspa o o {cjSf^-rSo 

[0 09 3] -^^-/^'§P2 0 Of a. ^JC'^K^SS 

m4 bicm^-t^. 



(14) 



25 



[ 0 0 9 4 ] «iE#®4 7 f)K mn^ms 7 J: 

[0095] ccx. Mmf't^^ji^^Gi^mm^MM lo 

[0 09 81 1 3 U^. «^t"^S#Sg 

t k:^^ X ^ -^I'S'^ ^ . ^» X ^ r^m 
0 c o J: ^ ^c^T^t^ ^ 1 3 5 r f-^ 

3 7$C*a&i?>tlS« 30 

[0100] M^7=^^:^^ii'S«f1^^#^i 3 7 
i%'^'&ti'hM^y'ly^)\^M^^^\i^XWM^MMM 

ST^fP^b. cn*3tf*#Mi 4 i3&:*6^?^>rr>F 

ggl 0 0^C3tWi"^„ 

[0 10 2] ^13^:. ill 0^-7 ;r;U:5fM55^f(^S^i^ 
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* NOTICES * 

JPO and INPIT are not responsible for any 
damages caused by the use of this translation. 

1. This document has been translated by computer. So the translation may not reflect 
the original precisely. 

2. **** shows the word which can not be translated, 
3.1n the drawings, any words are not translated. 



CLAIMS 



[Claim(s)] 

[Claim 1]A time stamp system which consists of a client apparatus and a server 
apparatus, comprising: 

A digest preparing means which creates two or more digests in which a client 
apparatus receives two or more digital documents. 

A digest coupling means which combines two or more digests created by this digest 
preparing means. 

An integrated digest preparing means which creates an integrated digest from two or 

more digests combined by this digest coupling means. 

An integrated digest created by this integrated digest preparing means. 

[Claim 2]The time stamp system according to claim 1, wherein a client apparatus has 
further a digital document setting means which specifies said two or more digital 
documents per a file or folder from a digital document on a personal computer or a 
network. 

[Claim 3]The time stamp system according to claim 2, wherein a digital document 
setting means specifies said two or more digital documents so that a time stamp 
certificate acquired before may be contained in said two or more digital documents. 
[Claim 4]A client apparatus specifies periodical digest creation time as a digest 
preparing means further. The time stamp system according to claim 1 by which a 
digest preparing means is characterized by having a time designated means to create 
said two or more digests periodically at this periodical digest creation time. 
[Claim 5]The time stamp system according to claim 1, wherein a client apparatus has 
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a verifying means which verifies whether a digital signature further contained in a time 

stamp certificate received by a receiving means is the right. 

[Claim 6]The time stamp system comprising according to claim 1: 

Sending time of a time stamp demand [ in / in time when a client apparatus is shown 

with a digital document with a time seal further contained in a time stamp certificate 

received by a receiving means / a means of transmittal ]. 

A verifying means which verifies that it is between receipt time of a time stamp 
certificate in a receiving means. 

[Claim 7]The time stamp system comprising according to claim 1: 
A digital signature means for a server apparatus to combine an integrated digest and 
time information, to ask for a digital document with a time seal, and to generate a 
digital signature to a digital document with a time seal. 

A time stamp certificate preparing means which draws up a time stamp certificate 
from a digital document with a time seal generated by this digital signature means, and 
a digital signature. 

[Claim 8]The time stamp system comprising according to claim 1 : 
A time acquiring means which acquires said time information to which server 
apparatus are two or more time acquiring means, and each time acquiring means was 
independently given by predetermined, fixed unit width with other time acquiring 
means according to a time stamp demand one by one. 

A coupling means which each coupling means combines data which included an 
integrated digest for time information acquired one by one by corresponding time 
acquiring means independently of other coupling means one by one, and draws up two 
or more digital documents with a time seal by two or more coupling means established 
corresponding to a time acquiring means of these plurality. 

A digital signature means to generate a digital signature to each digital document with 
a time seal which was drawn up by corresponding coupling means independently of 
other digital signature means by two or more digital signature means formed 
corresponding to a coupling means of these plurality as for each digital signature 
means. 

From two or more digital signatures generated by two or more digital signature means. 
Two or more digital signatures generated to a digital document with a time seal of 
identical time by two or more digital signature means. An integrated-digital-signatures 
preparing means which chooses one at a time for every digital signature means, and 
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creates integrated digital signatures from a selected digital signature, A time stamp 
certificate preparing means which draws up a time stamp certificate from a digital 
document with a time seal of integrated digital signatures created by this 
integrated-digital-signatures preparing means and said identical time. 

[Claim 9]The time stamp system according to claim 8, wherein each digital signature 
means is controlled not to generate a digital signature to at least one of the digital 
documents with a time seal of time which cannot turn into said identical time. 
[Claim 10]The time stamp system according to claim 8, wherein an 
integrated-digital-signatures preparing means and a time stamp certificate preparing 
means constitute a time stamp organization and each class of a time acquiring means, 
a coupling means, and a digital signature means constitutes a distributed partial time 
stamp organization* 

[Claim 11 ]A client apparatus of a time stamp system characterized by comprising the 
following. 

A digest preparing means which creates two or more digests which receive two or 
more digital documents. 

A digest coupling means which combines two or more digests created by this digest 
preparing means. 

An integrated digest preparing means which creates an integrated digest from two or 
more digests combined by this digest coupling means. 

A means of transmittal which sends a time stamp demand included an integrated 
digest created by this integrated digest preparing means to a server apparatus of a 
time stamp system, and a receiving means which receives a time stamp certificate to 
said two or more digital documents from a server apparatus. 

[Claim 1 2]The client apparatus according to claim 1 1 having further a digital document 
setting means which specifies said two or more digital documents per a file or folder 
from a digital document on a personal computer or a network. 
[Claim 1 3]The client apparatus according to claim 12, wherein a digital document 
setting means specifies said two or more digital documents so that a time stamp 
certificate acquired before may be contained in said two or more digital documents. 
[Claim 14]The client apparatus according to claim 11 specifying periodical digest 
creation time as a digest preparing means, and having further a time designated means 
by which a digest preparing means creates said two or more digests periodically at 
this periodical digest creation time. 
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[Claim 15]The client apparatus according to claim 11 having further a verifying means 
which verifies whether a digital signature contained in a time stamp certificate 
received by a receiving means is the right. 

[Claim 16]Sending time of a time stamp demand [ in / in time shown with a digital 
document with a time seal contained in a time stamp certificate received by a 
receiving means / a means of transmittal ], The client apparatus according to claim 1 1 
having further a verifying means which verifies that it is between receipt time of a 
time stamp certificate in a receiving means. 

[Claim 17] A server apparatus of a time stamp system characterized by comprising the 
following. 

A time acquiring means which acquires said time information to which each time 
acquiring means was independently given by predetermined, fixed unit width with other 
time acquiring means by two or more time acquiring means according to a time stamp 
demand one by one. 

A coupling means which each coupling means combines data which included an 
integrated digest for time information acquired one by one by corresponding time 
acquiring means independently of other coupling means one by one, and draws up two 
or more digital documents with a time seal by two or more coupling means established 
corresponding to a time acquiring means of these plurality. 

A digital signature means to generate a digital signature to each digital document with 
a time seal which was drawn up by corresponding coupling means independently of 
other digital signature means by two or more digital signature means formed 
corresponding to a coupling means of these plurality as for each digital signature 
means. 

From two or more digital signatures generated by two or more digital signature means. 
Two or more digital signatures generated to a digital document with a time seal of 
identical time by two or more digital signature means. An integrated-digital-signatures 
preparing means which chooses one at a time for every digital signature means, and 
creates integrated digital signatures from a selected digital signature, A time stamp 
certificate preparing means which draws up a time stamp certificate from a digital 
document with a time seal of integrated digital signatures, created by this 
integrated-digital-signatures preparing means and said identical time. 

[Claim 18]The server apparatus according to claim 17, wherein each digital signature 
means is controlled not to generate a digital signature to at least one of the digital 
documents with a time seal of time which cannot turn into said identical time. 



4 



Publication JP 2000-142398 



[Claim 19]The server apparatus according to claim 17, wherein an 
integrated-digital-signatures preparing means and a time stamp certificate preparing 
means constitute a time stamp organization and each class of a time acquiring means, 
a coupling means, and a digital signature means constitutes a distributed partial time 
stamp organization. 

[Claim 20]It is the time stamp method characterized by comprising the following in a 
time stamp system which consists of a client apparatus and a server apparatus, and is 
the (a) client apparatus. 

A step which creates two or more digests which receive two or more digital 

documents. 

(b) A step which combines two or more digests created by step (a) in a client 
apparatus. 

(c) A step which creates an integrated digest from two or more digests which a client 
apparatus set and were combined by step (b). 

(d) A step which sends a time stamp demand included an integrated digest created by 
step (c) to a server apparatus from a client apparatus. 

(e) A digital document with a time seal which combined time information and an 
integrated digest which were acquired according to a time stamp demand, and was 
called for in a server apparatus. 

A step which draws up a time stamp certificate having contained a digital signature to 
a digital document with a time seal. 

(f) A step which receives a time stamp certificate to said two or more digital 
documents from a server apparatus in a client apparatus. 

[Claim 21 ]A time stamp method according to claim 20 having further a step which 
specifies said two or more digital documents per a file or folder from a digital 
document on a personal computer or a network in a client apparatus. 
[Claim 22]A time stamp method according to claim 21. wherein said step to specify 
specifies said two or more digital documents so that a time stamp certificate acquired 
before may be contained in said two or more digital documents. 

[Claim 23]A time stamp method according to claim 20, wherein it specifies periodical 
digest creation time and a step (a) has further a step which creates said two or more 
digests periodically at this periodical digest creation time in a client apparatus. 
[Claim 24]A time stamp method according to claim 20 having further a step which 
verifies whether a digital signature contained in a time stamp certificate received at a 
step (f) in a client apparatus is the right. 
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[Claim 25]Sending time of a time stamp demand [ in / in time shown with a digital 
document with a time seal contained in a time stamp certificate received at a step (f) 
in a client apparatus / a step (d) ], A time stamp method according to claim 20 having 
further a step which verifies that it is between receipt time of a time stamp certificate 
in a step (f). 

[Claim 26]Said step (e) characterized by comprising the following is each time 
acquiring means of two or more time acquiring means of a server apparatus (el). 
A step which acquires said time information independently given by predetermined, 
fixed unit width with other time acquiring means one by one according to a time stamp 
demand. 

(e2) In each coupling means of two or more coupling means established corresponding 
to a time acquiring means of these plurality of a server apparatus, A step which 
combines data which included an integrated digest for time information acquired one 
by one by corresponding time acquiring means independently of other coupling means 
one by one, and draws up two or more digital documents with a time seal. 
(e3) A step which generates a digital signature to each digital document with a time 
seal drawn up by corresponding coupling means independently of other digital 
signature means in each digital signature means of two or more digital signature 
means formed corresponding to a coupling means of these plurality of a server 
apparatus. 

(e4) From two or more digital signatures generated by two or more digital signature 
means. Two or more digital signatures generated to a digital document with a time seal 
of identical time by two or more digital signature means, A step which chooses one at 
a time for every digital signature means, and creates integrated digital signatures from 
a selected digital signature, and integrated digital signatures created by step (e5) (e4) 
and a step which draws up a time stamp certificate from a digital document with a 
time seal of said identical time. 

[Claim 27]A time stamp method according to claim 26, wherein each digital signature 
means is controlled in said step (e3) not to generate a digital signature to at least one 
of the digital documents with a time seal of time which cannot turn into said identical 
time. 

[Claim 28]A method characterized by comprising the following of receiving time stamp 
service in a client apparatus of a time stamp system. 

(a) A step which creates two or more digests which receive two or more digital 
documents. 
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(b) A step which combines two or more digests created by step (a). 

(c) A step which creates an integrated digest from two or more digests combined by 
step (b). 

(d) A step which sends a time stamp demand included an integrated digest created by 
step (c) to a server apparatus of a time stamp system, and a step which receives a 
time stamp certificate to said two or more digital documents from the (e) server 
apparatus. 

[Claim 29]How to receive the time stamp service according to claim 28 having further 
a step which specifies said two or more digital documents per a file or folder from a 
digital document on a personal computer or a network. 

[Claim 30] How to receive the time stamp service according to claim 29, wherein said 
step to specify specifies said two or more digital documents so that a time stamp 
certificate acquired before may be contained in said two or more digital documents. 
[Claim 31]How to receive the time stamp service according to claim 28 specifying 
periodical digest creation time and having further a step to which a step (a) creates 
said two or more digests periodically at this periodical digest creation time in a client 
apparatus. 

[Claim 32]A digital document with a time seal which a time stamp certificate combined 
time information and an integrated digest which were acquired according to a time 
stamp demand, and was called for. In [ a digital signature to a digital document with a 
time seal is included, and ] a client apparatus. How to receive the time stamp service 
according to claim 28 having further a step which verifies whether a digital signature 
contained in a time stamp certificate received at a step (e) is the right. 
[Claim 33]A digital document with a time seal which a time stamp certificate combined 
time information and an integrated digest which were acquired according to a time 
stamp demand, and was called for. In [ a digital signature to a digital document with a 
time seal is included, and ] a client apparatus. Sending time of a time stamp demand 
[ in / in time shown with a digital document with a time seal contained in a time stamp 
certificate received at a step (e) / a step (d) ], How to receive the time stamp service 
according to claim 28 having further a step which verifies that it is between receipt 
time of a time stamp certificate in a step (e). 

[Claim 34]It is a method characterized by comprising the following of providing time 
stamp service in a server apparatus of a time stamp system, and is each time 
acquiring means of two or more time acquiring means of the (a) server apparatus. 
A step which acquires said time information independently given by predetermined. 
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fixed unit width with other time acquiring means one by one according to a time stamp 
demand. 

(b) In each coupling means of two or more coupling means established corresponding 
to a time acquiring means of these plurality of a server apparatus, A step which 
combines data which included an integrated digest for time information acquired one 
by one by corresponding time acquiring means independently of other coupling means 
one by one, and draws up two or more digital documents with a time seal. 

(c) A step which generates a digital signature to each digital document with a time 
seal drawn up by corresponding coupling means independently of other digital 
signature means in each digital signature means of two or more digital signature 
means formed corresponding to a coupling means of these plurality of a server 
apparatus. 

(d) From two or more digital signatures generated by two or more digital signature 
means. Two or more digital signatures generated to a digital document with a time seal 
of identical time by two or more digital signature means, A step which chooses one at 
a time for every digital signature means, and creates integrated digital signatures from 
a selected digital signature, and integrated digital signatures created by the (e) step 
(d) and a step which draws up a time stamp certificate from a digital document with a 
time seal of said identical time. 

[Claim 35]How to provide the time stamp service according to claim 34, wherein each 
digital signature means is controlled in said step (c) not to generate a digital signature 
to at least one of the digital documents with a time seal of time which cannot turn into 
said identical time. 

[Claim 36]A recording medium characterized by comprising the following which stored 
a program code in which computer reading for operating a computer as a client 
apparatus of a time stamp system is possible and in which computer applications are 
possible. 

The first program code with which a program code in which this computer reading is 
possible creates two or more digests which receive two or more digital documents. 
The second program code that combines two or more digests created by this first 
program code. 

The third program code that creates an integrated digest from two or more digests 
combined by this second program code. 

The fourth program code that sends a time stamp demand included an integrated 
digest created by this third program code to a server apparatus of a time stamp 
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system, and the fifth program code that receives a time stamp certificate to said two 
or more digital documents from a server apparatus. 

[Claim 37]A recording medium characterized by comprising the following which stored 
a program code in which computer reading for operating at least one computer as a 
server apparatus of a time stamp system is possible and in which computer 
applications are possible. 

The first program code for program codes in which this computer reading is possible 
to be two or more time acquiring means, and for each time acquiring means realize a 
time acquiring means which acquires said time information independently given by 
predetermined, fixed unit width with other time acquiring means one by one according 
to a time stamp demand. 

Corresponding to a time acquiring means of these plurality, by two or more 
established coupling means, each coupling means. The second program code for 
realizing a coupling means which combines data which included an integrated digest 
for time information acquired one by one by corresponding time acquiring means 
independently of other coupling means one by one, and draws up two or more digital 
documents with a time seal. 

Corresponding to a coupling means of these plurality, by two or more formed digital 
signature means, each digital signature means. The third program code for realizing a 
digital signature means to generate a digital signature to each digital document with a 
time seal drawn up by corresponding coupling means independently of other digital 
signature means. 

From two or more digital signatures generated by two or more digital signature means. 
Two or more digital signatures generated to a digital document with a time seal of 
identical time by two or more digital signature means, Choose one at a time for every 
digital signature means, and integrated digital signatures from a selected digital 
signature The fourth program code of Integrated digital signatures created by 

this integrated-digital-signatures preparing means and the fifth program code that 
draws up a time stamp certificate from a digital document with a time seal of said 
identical time. 



[Translation done.] 
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DETAILED DESCRIPTION 

[Detailed Description of the Invention] 
[0001] 

[Field of the Invention]In the service which pushes a time seal, this invention is not 
changed into a digital document after the time of a digital document having a time seal 
pushed. And when surely a time seal is pushed, it is related with the folder type time 
stamp system and distributed time stamp system which make it possible to prove that 
the target digital document existed. 
[0002] 

[Description of the Prior Art] For example, under the patent system based on the 
first-to-invent rule in the U.S.. it is known that it will be possible to use as a proof the 
research note containing the date proves a right of priority to be, and the 
housekeeping book in which the date was attached further can be used as expenditure 
record in a final declaration. On the other hand, it is becoming very general to perform 
everyday record of a research note, a housekeeping book, etc. using a personal 
computer as a personal computer comes to be used daily. 

[0003]However, since what is depended on electric and the digital record on such a 
personal computer was rewritten easily, unlike the record written using the paper as a 
recording medium, it had the problem that the contents of record including a recording 
date could not be proved for a third party. 

[0004]On the other hand, "the personal time authentication device" of a statement is 
conventionally known by JP,7-254897,A as service which stamps a time seal on a 
digital document. This personal time authentication device builds a time stamp device 
into a smart card etc., and when performing a digital signature, it performs a time 
stamp together. A "digital time authentication device" given in JP,3-185551,A creates 
a time stamp device as one hardware platform, and the maker of a document performs 
a time stamp using the device. Since each of these is methods with which a document 
preparation person performs a time stamp, they tends to carry out forgery, and since 
they is not the proof by an independent organization, they is what has scarce 
reliability. 

[0005]"The electronic authentication method and a device" given in JP,6-14018,A 
draw up a compression document combining ORG (Cyclic Redundancy Check; Cyclic 
Redundancy Check), the parity, and the checksum to the original document, and 
perform a time stamp. The compression document drawn up by this method tends to 
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carry out forgery of the digital document which has the same compression document 
as compared with the compression document drawn up using the hash functions (for 
example, MD5, SHA-1, etc.) widely used as encoding technology now. 
[0006] Furthermore, the outside facilities to which "the method of pushing a time 
stamp on a numerical document certainly" given in the Patent Publication Heisei No. 
501571 [ six to ] gazette performs a time stamp draw up a time stamp certificate 
independently. The method of pushing this time stamp is easy for outside facilities to 
forge a time stamp certificate. 

[0007]In order to compensate this fault, the method of performing a digital signature in 
the compression document obtained with the application of the hash function to the 
digital document which combined the time stamp certificate which the received time 
stamp demand and its outside facilities published immediately before, and drawing up a 
time stamp certificate is proposed. Although this method makes it impossible that 
time stamp outside facilities forge a time stamp certificate as a matter of fact, it 
cannot verify whether an order within a different round (fixed time which publishes 
two or more time stamp certificates) is a right order. 

[0008]In order to prove that a time stamp certificate is genuine, the certificate 
published before it is needed. That is, unless it saves a time stamp certificate until it 
arrives at the value of the time stamp certificate in the time of saving all the time 
stamp certificates which time stamp outside facilities published, or being periodically 
exposed to public attention, it cannot prove that a time stamp certificate is genuine. 
For this reason, while needing a storage capacity huge as a system, huge time is 
needed for the proof of a genuine thing. 

[0009]Now, standardization of the protocol which sends the digital document 
compressed by the hash function in IETF (Internet Engineering Task Force) to outside 
facilities, and draws up a time stamp certificate to the sent compression digital 
document is advanced. In the method with which standardization is considered here. 
Outside facilities have already included the problem that the danger that a third party 
with the bad faith which is not allowed to acquire the possibility and the time stamp 
certificate of forgery of a time stamp certificate will acquire a time stamp certificate 
unjustly cannot be eliminated in order to draw up a time stamp certificate at one place. 
[0010] 

[Problem(s) to be Solved by the Invention]On the other hand, with the "time stamp 
device" of a statement. [ Japanese Patent Application No. / No. 35761 / 1 1 to ] A 
time stamp organization does not create a digital signature independently, but one 
time stamp organization owns the partial secret key equivalent to what divided the 
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secret key in public key encryption. When each partial sign organization which is an 
independent organization creates a partial sign independently, a means to prevent 
forgery of the time stamp certificate by a time stamp means is provided. In this time 
stamp device, the existence proof of a reliable digital document becomes possible by 
creating the creation history of a document periodically and drawing up the time 
stamp certificate about that document preparation history by a time stamp means by 
the client side using a time stamp means. 

[001 1]In order to eliminate the danger of the forgery which pushes the time seal which 
the danger of the theft of a secret key and the author of a digital document in case 
the outside facilities which perform a time stamp perform a digital signature in the 
server side using one secret key, and time stamp outside facilities conspired, and 
went back in the past. Two or more digital signature means divide and have a secret 
key of a time stamp device, and each digital signature means performs a digital 
signature independently. While this abolishes the danger of a secret key theft, Unless 
all the organizations that perform a means to acquire time, and a means to perform a 
digital signature conspire, by preventing from forging a time seal, it is safe and the time 
stamp outside facilities which offer time stamp service which can set reliance can be 
managed. It is possible to reduce a storage capacity substantially as compared with 
conventional method which does not need to keep any time stamp certificate 
published in the past, and mentioned it above. 

[001 2] However, when the dispersed time stamp organization performs a time 
signature in the same digital document independently using a partial secret key, unless 
it performs a digital signature in the digital document which attached the same time at 
all, a digital signature is unverifiable by the public key corresponding to a distributed 
secret key. 

[0013]This invention by in light of the above-mentioned problems acquiring the time 
stamp certificate for existence proof from the independent organization which can set 
reliance periodically, for example to the digital document on a personal computer, The 
digital document on a personal computer is considered as the same record as a 
research note or a housekeeping book in which a history remains daily, and it aims at 
providing a folder type time stamp system utilizable as a recording medium which can 
moreover prove the change creation record for a third party. 
[001 4] An object of this invention is to provide the distributed time stamp system 
which enables it to decode the integrated digital signatures obtained from two or more 
partial digital signature results when performing a time signature dispersedly 
independently using one public key. 
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[0015] 

[Means for Solving the Problemjln order to solve an aforementioned problem, this 
invention is a time stamp system which consists of a client apparatus and a server 
apparatus, and a client apparatus, A digest preparing means which creates two or 
more digests which receive two or more digital documents, A digest coupling means 
which combines two or more digests created by this digest preparing means. An 
integrated digest preparing means which creates an integrated digest from two or 
more digests combined by this digest coupling means, A means of transmittal which 
sends a time stamp demand included an integrated digest created by this integrated 
digest preparing means to a server apparatus. Have a receiving means which receives 
a time stamp certificate to said two or more digital documents from a server 
apparatus, and a server apparatus, A time stamp system drawing up a time stamp 
certificate having contained a digital document with a time seal which combined time 
information and an integrated digest which were acquired according to a time stamp 
demand, and was called for, and a digital signature to a digital document with a time 
seal is provided. 

[001 6]A digest preparing means which creates two or more digests in which this 
invention receives two or more digital documents, A digest coupling means which 
combines two or more digests created by this digest preparing means. An integrated 
digest preparing means which creates an integrated digest from two or more digests 
combined by this digest coupling means, A means of transmittal which sends a time 
stamp demand included an integrated digest created by this integrated digest 
preparing means to a server apparatus of a time stamp system, A client apparatus of a 
time stamp system having a receiving means which receives a time stamp certificate 
to said two or more digital documents from a server apparatus is provided. 
[0017]This inventions are two or more time acquiring means, and each time acquiring 
means. They are a time acquiring means which acquires said time information to which 
other time acquiring means were independently given by predetermined, fixed unit 
width according to a time stamp demand one by one, and two or more coupling means 
established corresponding to a time acquiring means of these plurality, A coupling 
means which each coupling means combines data which included an integrated digest 
for time information acquired one by one by corresponding time acquiring means 
independently of other coupling means one by one, and draws up two or more digital 
documents with a time seal. Corresponding to a coupling means of these plurality, by 
two or more formed digital signature means, each digital signature means, A digital 
signature means to generate a digital signature to each digital document with a time 
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seal drawn up by corresponding coupling means independently of other digital 
signature means. From two or more digital signatures generated by two or more digital 
signature means. An integrated-digital-signatures preparing means which chooses 
two or more one digital signatures of every generated to a digital document with a 
time seal of identical time by two or more digital signature means for every digital 
signature means, and creates integrated digital signatures from a selected digital 
signature, A server apparatus of a time stamp system having integrated digital 
signatures created by this integrated-digital-signatures preparing means and a time 
stamp certificate preparing means which draws up a time stamp certificate from a 
digital document with a time seal of said identical time is provided. 
[001 8] In [ this invention is the time stamp method in a time stamp system which 
consists of a client apparatus and a server apparatus, and ] the (a) client apparatus. In 
a step which creates two or more digests which receive two or more digital 
documents, and the (b) client apparatus, A step which combines two or more digests 
created by step (a), (c) A step which creates an integrated digest from two or more 
digests which a client apparatus set and were combined by step (b), (d) In a step 
which sends a time stamp demand included an integrated digest created by step (c) to 
a server apparatus from a client apparatus, and the (e) server apparatus, A digital 
document with a time seal which combined time information and an integrated digest 
which were acquired according to a time stamp demand, and was called for, A time 
stamp method having a step which draws up a time stamp certificate having contained 
a digital signature to a digital document with a time seal, and a step which receives a 
time stamp certificate to said two or more digital documents from a server apparatus 
in the (f) client apparatus is provided. 

[001 9] A step which creates two or more digests which this invention is the method of 
receiving time stamp service in a client apparatus of a time stamp system, and receive 
a digital document of (a) plurality, (b) A step which combines two or more digests 
created by step (a), (c) A step which creates an integrated digest from two or more 
digests combined by step (b). (d) A step which sends a time stamp demand included 
an integrated digest created by step (c) to a server apparatus of a time stamp system, 
(e) Provide a method of receiving time stamp service having a step which receives a 
time stamp certificate to said two or more digital documents from a server apparatus. 
[0020]In [ this invention is the method of providing time stamp service in a server 
apparatus of a time stamp system, and ] each time acquiring means of two or more 
time acquiring means of the (a) server apparatus, A step which acquires said time 
information independently given by predetermined, fixed unit width with other time 
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acquiring means one by one according to a time stamp demand, (b) In each coupling 
means of two or more coupling means established corresponding to a time acquiring 
means of these plurality of a server apparatus, A step which combines data which 
included an integrated digest for time information acquired one by one by 
corresponding time acquiring means independently of other coupling means one by 
one, and draws up two or more digital documents with a time seal, (c) In each digital 
signature means of two or more digital signature means formed corresponding to a 
coupling means of these plurality of a server apparatus, A step which generates a 
digital signature to each digital document with a time seal drawn up by corresponding 
coupling means independently of other digital signature means, (d) Choose two or 
more one digital signatures of every per digital signature means generated to a digital 
document with a time seal of identical time by two or more digital signature means 
from two or more digital signatures generated by two or more digital signature means, 
A step which creates integrated digital signatures from a selected digital signature, (e) 
Provide a method of providing time stamp service having integrated digital signatures 
created by step (d) and a step which draws up a time stamp certificate from a digital 
document with a time seal of said identical time. 

[0021]This invention is a recording medium which stored a program code in which 
computer reading for operating a computer as a client apparatus of a time stamp 
system is possible and in which computer applications are possible, A program code in 
which this computer reading is possible. The first program code that creates two or 
more digests which receive two or more digital documents. The second program code 
that combines two or more digests created by this first program code. The third 
program code that creates an integrated digest from two or more digests combined by 
this second program code. The fourth program code that sends a time stamp demand 
included an integrated digest created by this third program code to a server apparatus 
of a time stamp system, A recording medium having the fifth program code that 
receives a time stamp certificate to said two or more digital documents from a server 
apparatus is provided. 

[0022]This invention is a recording medium which stored a program code in which 
computer reading for operating at least one computer as a server apparatus of a time 
stamp system is possible and in which computer applications are possible, A program 
code in which this computer reading is possible. The first program code for each time 
acquiring means to realize a time acquiring means which acquires said time 
information independently given by predetermined, fixed unit width with other time 
acquiring means one by one by two or more time acquiring means according to a time 
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stamp demand, Corresponding to a time acquiring means of these plurality, by two or 
more established coupling means, each coupling means, The second program code for 
realizing a coupling means which combines data which included an integrated digest 
for time information acquired one by one by corresponding time acquiring means 
independently of other coupling means one by one, and draws up two or more digital 
documents with a time seal. Corresponding to a coupling means of these plurality, by 
two or more formed digital signature means, each digital signature means. The third 
program code for realizing a digital signature means to generate a digital signature to 
each digital document with a time seal drawn up by corresponding coupling means 
independently of other digital signature means. From two or more digital signatures 
generated by two or more digital signature means. Two or more digital signatures 
generated to a digital document with a time seal of identical time by two or more 
digital signature means. Choose one at a time for every digital signature means, and 
integrated digital signatures from a selected digital signature The fourth program code 
of ******, A recording medium having integrated digital signatures created by this 
i ntegrated-digita ^signature s preparing means and the fifth program code that draws 
up a time stamp certificate from a digital document with a time seal of said identical 
time is provided. 
[0023] 

[Embodiment of the InventionjHereafter, an embodiment of the invention is described 
using a drawing. 

[0024]The composition of the folder type time stamp system concerning a first 
embodiment of this invention is shown in drawing 1 . 

[0025]In drawing t , the folder type time stamp system 1, The digest preparing means 
1 1 in which text information, picture information, and speech information create the 
digest of the target object digital document G among the digital documents contained 
suitably, The digest coupling means 13 which combines two or more digests created 
by this digest preparing means 11. The integrated digest preparing means 15 which 
creates an integrated digest to the result of the whole produced by combining two or 
more digests by this digest coupling means 13, The means of transmittal 17 which 
sends data including the integrated digest created by this integrated digest preparing 
means 15 to the digital signature preparing means 19 via the time stamp means 21, 
The time acquired from the time acquiring means 23 later mentioned to data including 
the integrated digest received from said integrated digest preparing means 15 via this 
means of transmittal 17 is combined, A time stamp means 21 for it to be created by 
the digital signature preparing means 1 9 which creates a digital signature to this 
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united whole, and these each means, and to send the time stamp certificate 
containing the integrated digest, the time, and the digital signature which were 
acquired to the receiving means 25, It is constituted by the time acquiring means 23 
which provides the time at the time of there being an inquiry by this time stamp means 
21 as time information, and the receiving means 25 which receives the time stamp 
certificate sent from said time stamp means 21. 

[0026]Here, the digest preparing means 11, the digest coupling means 13, the 
integrated digest preparing means 15, the means of transmittal 17, and the receiving 
means 25 constitute the client part 100, and the digital signature preparing means 19, 
the time stamp means 21, and the time acquiring means 23 constitute the server part 

200. 

[0027]Hereafter, with reference to drawing 1 , the time stamp processing in a first 
embodiment is explained. 

[0028]The object digital document G which consists of the text information created 
by the author, picture information, speech information, binary information, or those 
combination. By the digest preparing means 1 1 in the folder type time stamp system 1, 
while timing improvement in the speed of processing. It is made not to send the 
original document to the server part 200, and in order to obtain a value which is 
different with very high probability to a document different moreover, a hash function 
(for example, SHA-1 and MD5) is used for every digital document, and a digest is 
created. 

[0029]If a hash function is specifically made into h, two or more digital document g, 
which constitutes the object digital document G, gg, — , g^, the digests h (g,) and h (gj), 
— , h (g„) will be created by the digest preparing means 11. 

[0030] Next, they are [ each digests h (g|) and h (gg), — , ] h (g,) and h as a result of 
having combined h (gj by connection, by the digest coupling means 13, for example. 
— (ga) h (gn) is obtained. An integrated digest is created by the integrated digest 
preparing means 15 from this joint result. 

[0031] If the hash function used by the integrated digest preparing means 15 here is 
set to i, i (h (g^X h (gg) — h (g„)) will become an integrated digest. The integrated digest 
i (h (g|), h (gg) — h (g„)) is sent to the digital signature preparing means 19 via the time 
stamp means 21 by the means of transmittal 17. 

[0032]The digital signature preparing means 19 creates digital signature s to the 
integrated digest i (h (g^), h (gg) — h (g„)) and the digital data containing the time t 
acquired by the time acquiring means 23, and sends out this digital signature s to the 
time stamp means 21. 
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[0033]Then, in the time stamp means 21, the time stamp certificate containing this 
digital signature s, and the integrated digest i (h (g^\ h (gg) — h (g„)) and the time t is 
published, and it sends out to the receiving means 25. 

[0034]By getting the independent organization which can set reliance periodically to 
the digital document on a personal computer to publish the time stamp certificate for 
existence proof according to a first embodiment. Also in the digital document which a 
related document, a figure, a table, etc. are united and constitutes one systematic 
document in many cases. The digital document on a personal computer is related with 
other digital documents on the personal computer which is creating those related 
document or them, and it becomes possible to acquire a time stamp certificate. 
[0035]The reliability of the existence proof of the document which performed the time 
stamp can be improved, the digital document on a personal computer can be further 
considered as the same record as a research note or a housekeeping book in which a 
history remains daily, and it can utilize as a recording medium which can moreover 
prove the change creation record for a third party. 

[0036]After the time of a time seal being pushed, two or more digital documents are 
not changed by this, and when surely a time seal is pushed, it becomes possible to 
prove that the digital document of these plurality existed simultaneously. And it is not 
necessary to judge the necessity of a time stamp certificate for every digital 
document, and in order for what is necessary to be collecting to two or more digital 
documents, and Just coming to acquire one time stamp certificate, it becomes 
possible to utilize time stamp service by low cost. 

[0037]Next, the composition of the folder type time stamp system concerning a 
second embodiment of this invention is shown in drawing 2 . 

[0038]In drawing 2 , the folder type time stamp system 3, The digest preparing means 
31 in which a text document, picture information, and speech information create the 
digest of the target object digital document G among the digital documents F 
contained suitably. The digest coupling means 33 which combines two or more digests 
created by this digest preparing means 31, The integrated digest preparing means 35 
which creates an integrated digest to the result of the whole produced by combining 
two or more digests by this digest coupling means 33, The means of transmittal 37 
which sends data including the integrated digest created by this integrated digest 
preparing means 35 to the digital signature preparing means 39 via the time stamp 
means 41, It combines with data including the integrated digest which received the 
time acquired from the time acquiring means 43a mentioned later from the integrated 
digest preparing means 35 via said means of transmittal 37, A time stamp means 41 
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for it to be created by the digital signature preparing means 39 which creates a digital 
signature to this united whole, and these each means, and to send the time stamp 
certificate containing the integrated digest, the time, and the digital signature which 
were acquired to the receiving means 45, The time acquiring means 43a which 
provides the time at the time of there being an inquiry by this time stamp means 41 as 
time information. The receiving means 45 which receives the time stamp certificate 
sent from said time stamp means 41, The verifying means 47 which verifies the time 
stamp certificate received via this receiving means 45, A time designated means 49 to 
direct the creation timing of a digest to said digest preparing means 31, The digital 
document setting means 51 which specifies the digital document made into an object 
from the digital document F, it is constituted by the time acquiring means 43b which 
provides said digest preparing means 31, the means of transmittal 37, the receiving 
means 45, and the time at the time of it having been alike, and receiving and there 
being an inquiry to the verifying means 47 as time information. The time acquiring 
means 43a and the time acquiring means 43b may be the same. 
[0039]Here The digest preparing means 31 and the digest coupling means 33, The 
integrated digest preparing means 35, the means of transmittal 37, and the receiving 
means 45, The verifying means 47, the time designated means 49, the digital document 
setting means 51 , and the time acquiring means 43b constitute the client part 1 00, and 
the digital signature preparing means 39, the time stamp means 41 , and the time 
acquiring means 43a constitute the server part 200. 

[0040]Hereafter, with reference to drawing 2 , the time stamp processing in a second 
embodiment is explained. 

[0041] As opposed to the digital document F which consists of the text on [ from a 
personal computer ] the accessible inside of a personal computer, or a network, a 
sound, a picture, binary information, or those combination. The object digital document 
G specified per the file or folder by the digital document setting means 51 is specified. 
[0042]If it detects that the time specified by the time designated means 49 based on 
the time which the digest preparing means 31 acquired from the time acquiring means 
43b came, the digest preparing means 31 receives the object digital document G, A 
digest is created using hash functions, such as SHA-1 and MD5, for every digital 
document. 

[0043]In a hash function, if h and an object digital document are made into g|, g2 , 
and g„, the digests h (g,) and h (gj). — , h (g„) will be created by the digest preparing 
means 31. 

[0044]By the digest coupling means 33, as a result of combining h (g„) by connection. 
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they are [ the digests h (g^) and h (gg). — , ] h (g,) and h (gj), for example. — h (g„) is 
obtained. An integrated digest is created by the integrated digest preparing means 35 
from a joint result. 

[0045]If the hash function used by the integrated digest preparing means 35 is set to 
i, i (h (giX h (gg) — h (g„)) will become an integrated digest. The integrated digest i (h 
(gi). h (gg) — h (g„)) is sent to the digital signature preparing means 39 via the time 
stamp means 41 by the means of transmittal 37. 

[0046]As opposed to the digital data containing the time t which acquired the digital 
signature preparing means 39 by the integrated digest i (h (g^), h (gj) — h (gj) and the 
time acquiring means 43a, Digital signature s is created and this digital signature s is 
sent out to the time stamp means 41. 

[0047]The time stamp means 41 publishes the time stamp certificate containing the 
integrated digest i (h (g^), h (gg) — h (&,)), the time t, and digital signature s, and sends 
it out to the receiving means 45. 

[0048]The verifying means 47 verifies that it is the right digital signature by which the 
digital signature currently attached to the time stamp certificate received by the 
receiving means 45 was created by the digital signature preparing means 39. 
[0049]It verifies that the time attached to the time stamp certificate is after the time 
which the means of transmittal 37 sent to the digital signature preparing means 39, 
and it is before the time which the receiving means 45 received. 
[0050]As mentioned above, according to a second embodiment, it adds to the effect in 
a first embodiment, A time stamp certificate is periodically acquired to the file on the 
personal computer furthermore specified by the folder or the file basis, The series of 
the time stamp certificate which could record the creation change history of the file 
on a personal computer including the relation with a related file, and was acquired over 
long time can be used as the certificate by the third party to the creation change 
history of the file on a personal computer. Offer of the time stamp means by which it 
is reliable to a digital document more than a research note or a housekeeping book 
since forgery is difficult of the series of this time stamp certificate is attained. 
[0051]Such a program for folder type time stamp systems mentioned above can 
improve the distributivity of the folder type time stamp program by recording on a 
recording medium and being provided using this recording medium. 
[0052]Next, the composition of the distributed time stamp system concerning a third 
embodiment of this invention is shown in drawing 3 . 

[0053]In drawing 3 , the distributed time stamp system 101, Fixed time information t,j 
of unit width which a constant interval is set and is at least 1 time or more and which 
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exists independently respectively n times, — , two or more time acquiring means 11 3a, 

1 13b, , 1 13s which acquire t^,. It is provided every every [ these time acquiring 

means 1 13a and 1 13b / one ] 113 s, and time information ty is combined with the 

digital document M, Two or more coupling means 111a, 111b, Ills which create 
digital document Mty with a time seal independently respectively. These coupling 

means 111a and 111b two or more digital signature means 1 15a, 1 15b 1 15s to 

be formed one [ at a time ] every Ills, and to create a digital signature independently 
respectively, The digital signature means 115a and 1 15b of this plurality, two or 
more digital signatures independently created in 115 s are received. Choose the digital 
signature mutually created from the equal digital document Mt with a time seal out of 
the digital signature of these plurality every [ each digital signature means 1 15a and 

1 15b / one ] 115 s, and the digital document Mt equal to those selected each other 

with a time seal is received, Created digital signatures are consisted of by the 
integrated-digital-signatures preparing means 1 17 which creates 
integrated-digitai-signatures c. and the time stamp certificate preparing means 119 
which draws up the time stamp certificate T containing the digital document Mt with 
these time seals, and integrated-digitai-signatures c. 

[0054]Hereafter, with reference to drawing 3 , the distributed time stamp processing in 
a third embodiment is explained. Although explanation is advanced focusing on the 
system of the coupling means 111a here, also in other systems, it is the same. 
[0055]In the coupling means 1 1 la in [ the digital document M which consists of the 
text document drawn up by the author, picture information, speech information, binary 
information, or those combination to ] the distributed time stamp system 101, It is 
combined with the time acquired by the time acquiring means 113a, and the digital 
document Mt with a time seal is drawn up. The digital signature to this drawn-up 
digital document Mt with a time seal is created by the digital signature means 115a. 
Thus, the digital signature created by each digital signature means 1 15a, 1 15b, 1 15s 
is brought together in the integrated-digitai-signatures preparing means 1 1 7. 
[0056] Furthermore, the integrated-digitai-signatures preparing means 117 creates 
integrated digital signatures from the digital signature to the digital document Mt with 
those common time with a time seal, when the one digital document Mt with common 
time with a time seal can choose every digital signature means 1 15. Then, the time 
stamp certificate preparing means 119 draws up the digital document Mt with a time 
seal used for creating integrated digital signatures, and the time stamp certificate T 
including integrated digital signatures. 

[0057] Hereafter, an example is given and explained about digital signature creation. 
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Here, RSA public key encryption is used as an example of public key encryption. 
[0058]First, p and q are made into a sufficiently big prime number, and it sets with 
n=pq. And phi(n) = (p-1) (q-1) 

The relatively prime integer e is defined suitably. That is, gcd(e) =(q (p-1)"-1) 1, and n 

and e are used as a public key, and it is ed=1 mod phi (n) about d. 

When you come out and you consider it as a certain integer, let p, q, and d be secret 

keys. 

[0059]The digest obtained with the application of a hash function (for example, SHA~1 
and MD5) by the digital document Mt with common time with a time seal is set to m. 
[0060] It sets with c^m^'mod n. Let c be integrated digital signatures eventually created 
by the integrated-digital-signatures preparing means 1 17 at this time. When the total 
of the digital signature means 115 in drawing 3 is set to s, d is expressed by the sum of 
a number, and it is d=d|+d2+. — It sets with d^. 

[0061]If c,=m'*^mod n, — , Cs=m*^®mod n, will serve as c^, — . a digital signature 
created by the s digital signature means 115a, 1 15b, 1 15s. The digital document 
containing (Mt, c) turns into the time stamp certificate T. 

[0062]Next, the composition of the distributed time stamp system concerning a fourth 
embodiment of this invention is shown in drawing 4 . 

[0063]In drawing 4 , the distributed time stamp system 103, The receiving means 130 
which receives the digital document M by communication, and n times which a 
constant interval is set and is at least 1 time or more, Fixed time information tf^ of unit 
width which exists independently respectively, — , two or more time acquiring means 

133a, 133b 133s which acquire t^j, Time information ty is combined with these time 

acquiring means 133a and 133b, the digital document M that one was provided at a 
time every 133 s, and was received by the receiving means 130, Two or more coupling 

means 131a, 131b, , 131s which create digital document Mt^ with a time seal 

independently respectively, These coupling means 131a and 131b two or more 

digital signature means 135a, 135b 135s to be formed one [ at a time ] every 131 s, 

and to create a digital signature independently respectively. The digital signature 

means 135a and 135b of these plurality two or more digital signatures 

independently created in 135 s are received. The digital signature mutually created 
from the equal digital document Mt with a time seal out of the digital signature of 

these plurality is chosen every [ each digital signature means 135a and 135b / 

one ] 135 s. As opposed to the digital document Mt equal to those selected each 
other with a time seal. The integrated-digital-signatures preparing means 137 which 
creates integrated-digital-signatures c from the created digital signature. The time 



22 



Publication JP 2000-142398 



stamp certificate preparing means 139 which draws up the time stamp certificate T 
containing the digital document Mt with these time seals, and 
integrated-digital-signatures c. It is constituted by the means of transmittal 141 
which returns the sender of a digital document the time stamp certificate T drawn up 
by this time stamp certificate preparing means 139 by communication. 
[0064]Draw'mg 5 and drawing 6 show the relation of the acquisition-times information 
in third and fourth embodiments. Here, the relation of acquisition-times information is 
shown for the case where there are three digital signature means in the example. In 
drawing 5 and drawing 6, t„, tjt, and tg^ express the time which three time acquiring 
means acquired to the 1 st time, respectively, and t^g, tgg, and express the time 
which three time acquiring means acquired to the 2nd time, respectively, t^, tjg, and %^ 
express exact time when three time acquiring means perform time acquisition to the 
1st time, respectively, tj^, tjg, and tjg express exact time when three time acquiring 
means perform time acquisition to the 2nd time, respectively. 
[0065]It means having acquired the time information same to the 1 st time also as 
three time acquiring means, and having acquired as same the time information as the 
2nd time in drawing 5 . In this case, t„=t2i=t3^ serves as time used for creation of 
integrated digital signatures. Similarly, it expresses having acquired the time 
information with the 1st same time of the third time acquiring means in drawing 6 as 
the 2nd time of the second time acquiring means for a start. In this case, t3i=ti2=t22 
serves as time used for creation of integrated digital signatures. 
[0066] Drawing 7 shows the relation between the exact time at the time of the time 
acquisition at the time of cutting fine as compared with drawing 6 , and making width 
into a half, and acquisition-times information. In drawing 7 , t^, tgi, and tg^. Express the 
time which three time acquiring means acquired to the 1st time, respectively, and t,2. 
t22, and t32, Expressing the time which three time acquiring means acquired to the 2nd 
time, respectively, t^a, tgi, and tga express the time which three time acquiring means 
acquired to the 3rd time, respectively, tj^, tjg, and tjg express exact time when three 
time acquiring means perform time acquisition to the 1st time, respectively, tj^, tjg, and 
tj3 express exact time when three time acquiring means perform time acquisition to 
the 2nd time, respectively, t^i, t^, and t^s express exact time when three time acquiring 
means perform time acquisition to the 3rd time, respectively. In the example which 
made this unit width the half, in order to acquire the same time information by three 
time acquiring means, each time acquiring means needs to perform at least three time 
acquisition. 

[0067]Although the constant interval to which each time acquiring means performs 
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time acquisition can be set as arbitrary length, it is preferred to set up equally to the 
fixed unit width of the time which each time acquiring means acquires. 
[0068]It is also possible to make into the acquisition times of the 2nd henceforth time 
produced at the time acquired to the 1st time by adding the time of the fixed unit 
width decided beforehand one by one, without performing time acquisition of the 2nd 
henceforth actually. In this case, each time acquiring means may only perform time 
acquisition once. 

[0069]Although the fixed unit width of the time which each time acquiring means 
acquires can be set as arbitrary length, The more it makes unit width small, while the 
accuracy of the time acquired improves the more, the number of the digital signatures 
which each digital signature means will create will increase until the one digital 
document Mt with common time with a time seal can choose for every digital 
signature means. 

[0070]However, when time for the digital document M to reach each coupling means 
has dispersion. It is possible to reduce the number of digital signatures, as creation of 
the digital signature to at least one of the time which is not used as common time by 
any means as follows in the digital signature means corresponding to coupling means 
other than the coupling means which starts most as for time is not performed. 
[0071] Drawing 8 expresses the relation of time width which a digital document may 
reach to two different coupling means. (1) of drawing 8 expresses the case where a 
digital document cannot arrive at another coupling means only after the time which a 
digital document is the latest and may reach one coupling means, and (2) of drawing 8 , 
The time when a digital document may reach one coupling means latest is contained in 
the time zone when a digital document may reach another coupling means, And 
express the case where the time when a digital document may reach the former 
coupling means early most becomes the latter coupling means before the time when a 
digital document may arrive early most, and (3) of drawing 8 , The case where the time 
zone when a digital document may reach one coupling means is thoroughly contained 
in the time zone when a digital document may reach another coupling means is 
expressed. The relation of the time zone when the same digital document as two 
arbitrary coupling means arrives becomes these three either. 

[0072] Drawing 9 expresses the context of a in case the time-of^arrival belt to the 
coupling means which a digital document reaches latest is during the time c and d and 
the time zone when a digital document reaches the other arbitrary coupling means is 
during the time a and b, b, c, and d. (1) of drawing 9 . (2), and (3) show the case 
equivalent to (1) of drawing 8 , (2), and (3), respectively. The coupling means which a 
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digital document reaches latest here is set to CI, and the other arbitrary coupling 
means are set to C2. The interval of unit width, i.e., t;, and t|+, is set to u. 
[0073]Generally each coupling means makes start time time produced at the time of 
the latest after current time decided beforehand by adding zero or more time 
beforehand specified in order to remove the time which is not used on 
integrated-digital-signatures creation by any means here, It is possible to draw up a 
digital document with a time seal by combining with a digital document by making into 
time information time of the specification number obtained with the time interval 
specified beforehand. 

[0074]Here, when the arrival time of a digital document has a fixed gap between 
coupling means, zero or more time specified beforehand is used in order that the 
coupling means which starts digital document preparation with a time seal previously 
may originally delay the start of digital document preparation with a time seal 
according to the gap. 

[0075]Also when the time width of the arrival time of the digital document in a 
coupling means may have change, the specification number is used in order to call for 
the digital document with a time seal of the time which is common to every digital 
signature means so that integrated digital signatures can certainly be made. 
[0076]Since current time is e and it is n= 1 supposing it sets to v a product with the 
greatest integral values n and u that do not exceed (c-b)/u in the case of (1) of 
drawing 9 and a digital document reaches C2 at the time e between time tg and t4. It is 
possible for t4 and zero or more time specified beforehand to set to v=n*u=1*u time 
when it was beforehand decided after current time. The time interval specified 
beforehand is u, and after the specification number adds 1 to the minimum integral 
value m more than (d-a)/u, it can be considered as the number of ** which 
lengthened n. In this case, since it is m= 5, the specification number is set to 5+1-1=5. 
[0077]As a result, it is not necessary to draw up the digital document with a time seal 
which makes t4 time information. What is necessary is to draw up only the digital 
document with a time seal which makes time information tg of the five specification 
number from tg produced by adding v to t4, tg. t7. tg, and tg. What is necessary is to draw 
up only the digital document with a time seal which makes t4, tg, tg, t,, and tg time 
information similarly, when e is between a and What is necessary is to draw up only 
the digital document with a time seal which makes tg, ty, tg, tg, and tio time information 
similarly, when e is between t4 and b. 

[0078]Supposing a digital document reaches C2 at the time e between time and t4 in 
the case of (2) of drawing 9 . current time is e and it is possible for t4 and zero or more 
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time specified beforehand to set to 0 time when it was beforehand decided after 
current time. The time interval specified beforehand is u and the specification number 
can be considered as the number which added 1 to the minimum integral value m more 
than (d-a)/u. In this case, since the specification number is set to 6, only the digital 
document with a time seal which makes a hour entry t4, tg, tg, t,, tg, and tg will be drawn 
up. 

[0079]Supposing a digital document reaches C2 at the time e between time tg and tg in 
the case of (3) of drawing 9 , current time is e and it is possible for tg and zero or more 
time specified beforehand to set to 0 time when it was beforehand decided after 
current time. The time interval specified beforehand is u and the specification number 
can be considered as the number which added 1 to the minimum integral value m more 
than (d-a)/u. In this case, since the specification number is set to 3, only the digital 
document with time which makes tg, tj, and tg a hour entry will be drawn up. 
[0080] Now, if it is in a distributed time stamp system, usually, Since the digital 
signature means of a component distributes and holds some secret keys in public key 
encryption. Since a possibility that the time which the time acquiring means acquired 
independently respectively is in agreement is very small as what can be made small 
mentioned above the theft of a secret key, and the danger of forgery of a time stamp 
certificate, there is a problem that integrated digital signatures cannot be created. 
[0081]On the other hand, in a third and fourth embodiment, since time is acquired by 
fixed unit width as mentioned above, a possibility that the time acquired independently 
respectively will become equal can be made high. In the example shown in drawing 5 
and drawing 6 , if a constant interval is set and at least two time acquisition is 
performed for every time acquiring means, it will actually become possible to obtain 
the digital document with a time seal which is certainly common by all the coupling 
means from unit width and the relation of the time acquisition execution time 
difference between time acquiring means. As a result, the distributed time signature 
which raises the safety of a secret key is attained. 

[0082] Such a distributed time stamp program can improve the distributivity of the 
distributed time stamp program concerned by recording on a recording medium and 
being provided. 

[0083]Although a third and fourth embodiment mentioned above explained the case 
where RSA was used for public key encryption. This invention divides secret keys, 
such as elliptic curve public key encryption and DSA (Digital Signature Algorithm), 
without being limited to this, Even if it uses the public key encryption which can 
create the same digital signature as the digital signature created with a single secret 
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key from two or more divided secret keys, it is possible to create a digital signature 
and integrated digital signatures similarly. 

[0084]Even if it creates integrated digital signatures using the digital document which 
contains the digital document Mt with a time seal instead of the digital document Mt 
with a time seal, it is satisfactory in any way. It is also possible to create a digital 
signature directly, without furthermore applying a hash function to a digital document. 
One time information may be made to correspond to the one digital document Mt with 
a time seal, and two or more time information may be made to correspond to the one 
digital document Mt with a time seal. That is, when it corresponds to one time 
information, one digital signature is created from the one digital document Mt with a 
time seal, and when it corresponds to two or more time information, two or more 
digital signatures will be created from the one digital document Mt with a time seal. 
[0085] Next, the composition of the folder type distribution time stamp system 
concerning a fifth embodiment of this invention is shown in drawing 10 . This fifth 
embodiment combines the first and a second embodiment which were mentioned 
above, and third and fourth embodiments. 

[0086]In drawing 1 0 , the folder type distribution time stamp system 300 consists of 
the client part 100 and the server part 200. The client part 100 creates the time 
stamp demand R from two or more digital documents G which are time stamp objects, 
and passes it to the server part 200. The server part 200 draws up the time stamp 
certificate T based on the received time stamp demand R, and returns it to the client 
part 100. 

[0087]The example of 1 composition of the client part 100 in the folder type 
distribution time stamp system 300 of drawing 10 is shown in drawing 11 . The client 
part 100 of drawing 1 1 is equivalent to the client part 100 of drawing 2 in a second 
embodiment mentioned above, and has given identical codes to the identical 
configuration element. 

[0088]First, the digital document G which is the target of a time stamp out of the set 
F of a digital document is chosen by the digital document setting means 51. 
[0089] Next, in the periodical digest creation time specified by the time designated 
means 49, a digest is created for every digital document with the selected digest 
preparing means 31. After creating a digest last time here, about the digital document 
which does not have change in the contents, it is also possible to use the digest 
created last time. 

[0090]Next, by the digest coupling means 33, the digest which the digest preparing 
means 31 created about each of the object digital document G is combined, and one 
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new digital document is drawn up. 

[0091]Next, an integrated digest is created from this new digital document by the 
integrated digest preparing means 36. 

[0092]And the time stamp demand R including an integrated digest is sent to the 
server part 200 from the means of transmittal 37. 

[0093]In the server part 200, the time stamp certificate T is drawn up so that it may 
mention later, and it sends to the receiving means 45 of the client part 100. 
[0094] Next, sending time according [ the verifying means 47 ] to the means of 
transmittal 37 and receipt time by the receiving means 45, That the digital signature 
which compares the attestation time currently recorded on the received time stamp 
certificate T, and also is contained in the time stamp certificate T is a genuine digital 
signature created by the server part 200, It verifies using the public key corresponding 
to the secret key which the server part 200 used, and also it is verified whether the 
digest by which the time stamp is carried out with the time stamp certificate T is sent 
by the means of transmittal 37. 

[0095]It becomes possible by including the last time stamp certificate in the object 
digital document G here to acquire a time stamp certificate including creation of the 
past of the object digital document G, and a change history. 
[0096]The example of 1 composition of the server part 200 in the folder type 
distribution time stamp system 300 of drawing 10 is shown in drawing 12 . The server 
part 200 of drawing 12 is equivalent to the distributed time stamp system of drawing 4 
in a fourth embodiment mentioned above, and has given identical codes to the 
identical configuration element. 

[0097]First, if the receiving means 130 receives the time stamp demand R, the copy 
will be sent to each coupling means 131. 

[0098] Next, each coupling means 131 combines the digital document M contained in 
the time acquired by the applicable time acquiring means 133 and the time stamp 
demand R, and draws up the digital document Mt with a time seal. 
[0099] Next, it creates with the partial secret key which acquires beforehand the 
digital signature to this drawn-up digital document Mt with a time seal in a digital 
signature means 135 to correspond. Thus, the digital signature created by each digital 
signature means 135 is brought together in the integrated-digital-signatures preparing 
means 137. 

[0100]Next, out of the collected digital signature, the integrated-digital-signatures 
preparing means 137 chooses one digital signature with common time information per 
digital signature means 135, and creates inte^^ated digital signatures. 
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[0101]And the time stamp certificate preparing means 139 draws up the time stamp 
certificate T using the created integrated digital signatures, and this is sent to the 
client part 100 from the means of transmittal 141. 

[0102]Other examples of composition of the server part 200 in the folder type 
distribution time stamp system 300 of drawing 10 are shown in drawing 1 3 . Drawing 13 

shows the distribution composition which employs the function of the server part 200 
by the independent independent organization, and has given identical codes to the 
server part 200 and identical configuration element of drawing 12 w hich were 

mentioned above. 

[0103]in drawing 13 the coupling means 131, the time acquiring means 133, and the 
digital signature means 135 every one lot each the one distributed partial time 
stamp organization 205, [ constitute and ] Although it differs from drawing 12 in that 
the receiving means 130, the integrated-digital-signatures preparing means 137, the 
time stamp certificate preparing means 139, and the means of transmittal 141 
constitute the one time stamp organization 204, operation of each means is the same 
as the case of drawing 12 . 
[0104] 

[Effect of the Invention]It is considered as the record in which a history remains daily 
by acquiring the time stamp certificate for existence proof from the independent 
organization which can set reliance periodically to the digital document on a personal 
computer according to the folder type time stamp system of this invention as 
mentioned above. And it becomes possible to prove change creation record for a third 
party. 

[0105]Since it becomes possible to obtain the digital document with a time seal which 
is certainly common by all the coupling means according to the distributed time stamp 
system of this invention, the distributed time signature which raises the safety of a 
secret key is attained. 
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[Brief Description of the Drawings] 

[Drawing 1]T he block diagram showing the example of composition of the folder type 
time stamp system in a first embodiment of this invention. 

[Drawing 23T he block diagram showing the example of composition of the folder type 

time stamp system in a second embodiment of this invention. 

[Drawing 3]T he block diagram showing the example of composition of the distributed 
time stamp system in a third embodiment of this invention. 

[Drawing 4] The block diagram showing the example of composition of the distributed 
time stamp system in a fourth embodiment of this invention. 
[Drawing Sj The figure showing an example of the acquisitionHtimes information 
acquired in drawing 3 and the distributed time stamp system of drawing 4 . 
[Drawing 6] The figure showing other examples of the acquisition-limes information 
acquired in drawing 3 and the distributed time stamp system of drawing 4 . 
[Drawing 7]T he figure showing other examples of the acquisitionHtimes information 
acquired in drawing 3 and the distributed time stamp system of drawing 4 . 
[Drawing 8]The figure showing the relation of the time width to which a digital 
document may reach two different coupling means in drawing 3 and the distributed 
time stamp system of drawing 4 . 

[Drawing 9]T he figure showing the example of the time width and the arrival time when 
a digital document may reach two different coupling means in drawing 3 and the 
distributed time stamp system of drawing 4 . 

[Drawing 10] The block diagram showing the example of composition of the folder type 

distribution time stamp system in a fifth embodiment of this invention. 

[Drawing 1 1j The block diagram showing the example of 1 composition of the client 

part in the folder type distribution time stamp system of drawing 10 . 

[Drawing 123 The block diagram showing the example of 1 composition of the server 

part in the folder type distribution time stamp system of drawing 10 . 

[Drawing 133 The block diagram showing other examples of composition of the server 

part in the folder type distribution time stamp system of drawing 10 . 

[Description of Notations] 

1 and 3 Folder type time stamp system 

1 1, 31 digest preparing means 

13 and 33 Digest coupling means 

1 5 and 35 Integrated digest preparing means 

17 and 37 Means of transmittal 

19, 39 digital-signature preparing means 



30 



Publication JP 2000-142398 



21 and 41 Time stamp means 
23 and 43 Time acquiring means 
25 and 45 Receiving means 

47 Verifying means 

49 Time designated means 

51 Digital document setting means 

100 Client part 

101,103 Distributed time stamp system 

111,131 Coupling means 
113,133 Time acquiring means 
115,135 digital signature means 

117,137 integrated-digital-signatures preparing means 
119,139 Time stamp certificate preparing means 
130 Receiving means 
141 Means of transmittal 
200 Server part 

300 Folder type distribution time stamp system 

M Digital document 

T Time stamp certificate 

R Time stamp demand 
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